$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json) Hash identifier: XWUKucv4oLoqV1v16Tp57f8ZpGKPMxso180+QXzdUFc= Subject key identifier: 2F:9B:6A:5A:6C:39:39:18:55:2E:F9:D6:FF:DD:E8:4A:1D:EA:71:6B Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Certificate serial: 026D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft Manifest number: 0258 Signing time: Mon 03 Nov 2025 01:43:11 +0000 Manifest this update: Mon 03 Nov 2025 01:43:10 +0000 Manifest next update: Mon 10 Nov 2025 01:43:10 +0000 Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: PcBODqGIkSbJ+75WQjv7DMn5aza4ndSE69jdP6QGmNk=) 2: 59A2E9D8A01411EF8E674221C4F9AE02.roa (hash: 5FPvqFtCVuXHbJ5vIpGbKLrezdmHhY92OGb34DPDtdI=) 3: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: +vXql9o+JG8jXikaEwvUdgbDzT28NGoMtEaj6InzCZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC Validity Not Before: Nov 3 01:43:10 2025 GMT Not After : Nov 10 01:43:10 2025 GMT Subject: CN=690808af-b419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:c2:72:5e:c1:a2:ba:f1:ae:df:8e:ff:4e: b4:8a:06:e0:a5:ea:85:40:04:5b:18:68:fc:dc:ae: 00:11:55:1a:c0:db:be:2d:06:23:9c:1d:9c:e3:c4: 54:94:7f:8a:9d:fa:81:0b:74:6f:04:0a:61:7a:7e: 4b:e0:3a:33:36:4a:1d:7b:1d:35:e1:24:86:7e:00: 69:5a:02:e4:e0:5e:ca:8f:c1:5e:99:5f:bc:f8:c8: a9:28:50:fe:09:3a:d9:0c:5a:6e:41:46:55:6f:7c: fc:13:6e:60:5b:9c:65:d3:84:7c:c4:ac:71:f7:a4: b5:41:92:44:d6:d1:ca:14:b9:d4:1d:1b:80:d7:62: e8:ff:6b:04:3a:66:3d:ac:9e:62:53:dd:76:d6:24: 08:8c:89:b5:2b:f9:bd:68:10:c2:43:39:50:8f:f6: cf:88:5f:02:ec:14:aa:1d:f1:09:fd:04:37:cc:b3: c8:23:a8:e4:ea:89:1a:3d:a4:c9:b6:63:4c:74:83: e8:ea:4d:41:ef:e8:3d:1c:04:88:29:d0:3f:e4:3b: 04:94:2a:1a:34:f2:d3:6a:b3:36:ee:ba:44:8e:e1: cd:15:14:5f:3a:e4:2b:fd:07:4c:3e:22:0a:ce:5d: 29:93:59:74:e5:fb:31:c8:01:eb:a7:9f:e8:79:e4: a9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9B:6A:5A:6C:39:39:18:55:2E:F9:D6:FF:DD:E8:4A:1D:EA:71:6B X509v3 Authority Key Identifier: keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:2d:41:e7:5b:b7:4d:92:f5:d4:86:ed:6f:5d:6c:6a:07:31: b7:dc:ac:11:8d:f3:db:ba:5f:99:94:32:3f:ed:56:ca:e0:e0: 08:5a:1c:4b:f9:c5:0c:09:a2:b0:7b:5a:9b:6d:bd:c4:e1:c3: b6:6f:8c:eb:35:93:fd:2b:75:72:e8:ee:4f:78:0b:e9:7d:c7: 06:2f:57:be:c7:05:7d:a6:46:98:0b:8b:7a:41:0c:88:62:21: b1:4b:19:40:7c:f9:b5:28:2c:01:74:1b:74:a0:0a:f3:f5:1a: f9:75:b7:39:8b:d4:08:fa:a3:9b:b6:43:0b:20:4d:ed:63:b8: ee:b0:6f:3b:07:4b:f2:6d:ee:e2:86:01:86:00:ed:48:02:ec: 44:ff:60:5f:a6:f7:5a:d9:7e:4c:38:20:02:f1:df:49:50:55: 95:2c:cf:25:d9:53:d8:bc:de:55:56:5f:a7:65:ad:75:23:59: bd:78:18:d4:cb:65:f9:f0:fc:1c:de:b8:cd:69:18:14:99:9a: e3:8d:56:c5:2b:62:26:2c:47:70:d5:57:b7:eb:e9:e2:66:af: 00:de:21:dd:fc:e2:90:83:26:81:ed:0b:e1:70:fb:42:5c:ad: 3f:fc:80:a9:ae:c1:f3:9f:51:ca:23:92:2d:44:33:46:58:ba: 92:93:2a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA4RUUxMTAvBgNVBAUTKDE1OEI5NjY2NEZCMUM5QUVFRUIzRDI4NzA3Rjg3N0ZF MjM3QjAyREMwHhcNMjUxMTAzMDE0MzEwWhcNMjUxMTEwMDE0MzEwWjAYMRYwFAYD VQQDEw02OTA4MDhhZi1iNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4jCcl7Borrxrt+O/060igbgpeqFQARbGGj83K4AEVUawNu+LQYjnB2c48RU lH+KnfqBC3RvBAphen5L4DozNkodex014SSGfgBpWgLk4F7Kj8FemV+8+MipKFD+ CTrZDFpuQUZVb3z8E25gW5xl04R8xKxx96S1QZJE1tHKFLnUHRuA12Lo/2sEOmY9 rJ5iU9121iQIjIm1K/m9aBDCQzlQj/bPiF8C7BSqHfEJ/QQ3zLPII6jk6okaPaTJ tmNMdIPo6k1B7+g9HASIKdA/5DsElCoaNPLTarM27rpEjuHNFRRfOuQr/QdMPiIK zl0pk1l05fsxyAHrp5/oeeSprwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+balps OTkYVS751v/d6Eod6nFrMB8GA1UdIwQYMBaAFBWLlmZPscmu7rPShwf4d/4jewLc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDhFRS81M0M2NzhENjQz MDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlhN3VzOUtIQl9oM19pTjdB dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZZdVdaay14eWE3dXM5S0hCX2gzX2lON0F0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDhFRS81M0M2NzhENjQzMDAxMUVEODQwQjMzNTdDNEY5QUUwMi9GWXVXWmsteHlh N3VzOUtIQl9oM19pTjdBdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTLUHnW7dNkvXUhu1vXWxqBzG33KwRjfPbul+ZlDI/7VbK4OAIWhxL +cUMCaKwe1qbbb3E4cO2b4zrNZP9K3Vy6O5PeAvpfccGL1e+xwV9pkaYC4t6QQyI YiGxSxlAfPm1KCwBdBt0oArz9Rr5dbc5i9QI+qObtkMLIE3tY7jusG87B0vybe7i hgGGAO1IAuxE/2Bfpvda2X5MOCAC8d9JUFWVLM8l2VPYvN5VVl+nZa11I1m9eBjU y2X58Pwc3rjNaRgUmZrjjVbFK2ImLEdw1Ve36+niZq8A3iHd/OKQgyaB7QvhcPtC XK0//ICprsHzn1HKI5ItRDNGWLqSkyqV -----END CERTIFICATE-----Generated at Tue Nov 4 08:07:13 2025 by rpki-client